Skills agile-planning Audit History
📦

Audit History

agile-planning - 4 audits

Version comparison

Capability and finding changes across audited versions, newest first.

VersionDateResultReview itemsChange vs previous
v4 LatestJul 6, 2026, 02:27 PM No confirmed findings0No capability change
v3 Jul 6, 2026, 02:27 PM No confirmed findings0External commands
v2 Jun 29, 2026, 11:24 PM No confirmed findings0No capability change
v1 Jan 23, 2026, 02:15 AM No confirmed findings0Baseline
Audit version 4 Latest

Jul 6, 2026, 02:27 PM

All six static findings are false positives after contextual review. The flagged external command patterns are markdown code fences and examples, and the reconnaissance flag points to task-writing guidance.

3
Files scanned
756
Lines analyzed
1
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (5)
SKILL.md:77-118 SKILL.md:118-164 SKILL.md:164-269 SKILL.md:269-273 SKILL.md:273-336
Audited by: codex
Audit version 3

Jul 6, 2026, 02:27 PM

All six static findings are false positives after contextual review. The flagged external command patterns are markdown code fences and examples, and the reconnaissance flag points to task-writing guidance.

3
Files scanned
756
Lines analyzed
1
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (5)
SKILL.md:77-118 SKILL.md:118-164 SKILL.md:164-269 SKILL.md:269-273 SKILL.md:273-336
Audited by: codex
Audit version 2

Jun 29, 2026, 11:24 PM

Static analysis reported command execution, weak cryptography, and reconnaissance patterns, but review found markdown planning examples rather than executable code. No prompt injection, network access, filesystem access, secret handling, or malicious intent was found in SKILL.md, references/sprint-guide.md, or references/template.md.

3
Files scanned
756
Lines analyzed
0
Review items
3
False positives ignored
Static false positives ignored (3)

These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.

Low
references/sprint-guide.md:35references/sprint-guide.md:40references/sprint-guide.md:102references/sprint-guide.md:106references/sprint-guide.md:112references/sprint-guide.md:115references/sprint-guide.md:118references/sprint-guide.md:121references/sprint-guide.md:124references/sprint-guide.md:127references/sprint-guide.md:140references/sprint-guide.md:140references/sprint-guide.md:146references/sprint-guide.md:150references/sprint-guide.md:153references/sprint-guide.md:157references/sprint-guide.md:162references/sprint-guide.md:167references/sprint-guide.md:170references/sprint-guide.md:175references/sprint-guide.md:178references/sprint-guide.md:182references/sprint-guide.md:207references/sprint-guide.md:214references/sprint-guide.md:217references/sprint-guide.md:235references/sprint-guide.md:238references/template.md:5references/template.md:96references/template.md:102references/template.md:122references/template.md:126SKILL.md:77SKILL.md:118SKILL.md:164SKILL.md:269SKILL.md:273
False Positive: Markdown Fences Flagged as Shell Execution
The static analyzer flagged backtick fences and inline examples as Ruby or shell execution. These locations are markdown templates and agile planning examples; they do not instruct the agent to run commands or execute user input.
The referenced lines are fenced markdown examples, template delimiters, or planning text. There is no script file, command invocation, subprocess call, or executable instruction at these locations.
Low
references/sprint-guide.md:45references/sprint-guide.md:56references/sprint-guide.md:65references/sprint-guide.md:79references/sprint-guide.md:84references/sprint-guide.md:93references/sprint-guide.md:221references/template.md:8references/template.md:21references/template.md:22references/template.md:23references/template.md:24references/template.md:35references/template.md:36references/template.md:37references/template.md:48references/template.md:49references/template.md:50references/template.md:110references/template.md:111references/template.md:116references/template.md:117references/template.md:134references/template.md:135references/template.md:139references/template.md:140references/template.md:144references/template.md:145SKILL.md:3SKILL.md:3SKILL.md:13SKILL.md:14SKILL.md:35SKILL.md:36SKILL.md:45SKILL.md:91SKILL.md:92SKILL.md:93SKILL.md:102SKILL.md:103SKILL.md:123SKILL.md:124SKILL.md:141SKILL.md:146SKILL.md:157SKILL.md:158SKILL.md:179
False Positive: Planning Text Flagged as Weak Cryptography
The static analyzer flagged ordinary words and ticket examples as weak cryptographic algorithms. The reviewed content discusses descriptions, design, dependencies, sprint codes, and task codes, not cryptographic functions or security-sensitive implementation.
The locations are prose or markdown task templates. No hashing, encryption, crypto library use, password handling, or key material appears in the reviewed files.
Low
references/sprint-guide.md:74
False Positive: Avoidance Guidance Flagged as Reconnaissance
The static analyzer flagged a system reconnaissance pattern at a line that starts an agile planning anti-pattern section. The word appears in normal documentation and does not request system inspection.
Line 74 is a documentation heading for planning mistakes to avoid. There is no command, host enumeration, environment probing, or data collection instruction.
No confirmed security findings were recorded for this completed audit.
Audited by: codex
Audit version 1

Jan 23, 2026, 02:15 AM

This skill is a pure documentation resource containing agile planning templates and best practices. All 85 static findings are false positives: markdown backticks for code formatting (not shell execution), documentation metadata (not cryptographic code), and metadata terminology (not reconnaissance). No executable code, network access, or file system operations exist in this skill.

3
Files scanned
756
Lines analyzed
0
Review items
0
False positives ignored
No confirmed security findings were recorded for this completed audit.
Audited by: claude
← Back to Skill